by Kastro
Paper/Archive/CVE-2023-27987

CVE-2023-27987

Apache Software Foundation Apache Linkis — Apache Linkis gateway module token authentication bypass

EPSS 0.8%CVSS 9.1
critical.is priorityof 100
39
CVSS 9.1 (NVD, ADP agree)9.1 / 10 × 3027.3Not in CISA KEV+300.0EPSS percentile 57.0.570 × 2011.4No public exploit+100.0SSVC exploitation: none+100.0
Description · from the CVE record

In Apache Linkis <=1.3.1, due to the default token generated by Linkis Gateway deployment being too simple, it is easy for attackers to obtain the default token for the attack. Generation rules should add random values. We recommend users upgrade the version of Linkis to version 1.3.2 And modify the default token value. You can refer to Token authorization[1] https://linkis.apache.org/docs/latest/auth/token https://linkis.apache.org/docs/latest/auth/token

Affected

ProductAffectedFixed inSource
Apache Linkis≤ 1.3.1–CNA
linkis≤ 1.3.1–CISA-ADP

Scores by source

CISA ADP9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
NVD9.1CVSS:3.1/AV:N/AC:L/PR:N/UI:N/S:U/C:H/I:H/A:N
CISA ADPSSVCExploitation: none · Automatable: yes · Technical impact: total

References

advisorylists.apache.org/thread/3cr1cz3210wzwngldwrqzm43vwhghp0prefopenwall.com/lists/oss-security/2023/04/10/3